
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/7B18C5B40CCE11ED97C94316C4F9AE02.roa
File: 7B18C5B40CCE11ED97C94316C4F9AE02.roa (raw, json)
Hash identifier: Vot1z8JYd9uGCTzLWBuwe/Mk40hyM6dwkLe5ZR9MnAE=
Subject key identifier: 94:4E:54:D8:AF:E3:6B:A4:7B:05:C6:78:6F:B2:67:26:A1:2A:18:14
Certificate issuer: /CN=A91D2A6D/serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE
Certificate serial: 0337
Authority key identifier: FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/7B18C5B40CCE11ED97C94316C4F9AE02.roa
Signing time: Mon 11 May 2026 01:32:12 +0000
ROA not before: Mon 11 May 2026 01:32:12 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 134573
IP address blocks: 103.120.230.0/23 maxlen: 23
103.120.230.0/24 maxlen: 24
103.120.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl
rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 01:10:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 823 (0x337)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2A6D, serialNumber=FC7B394F8F9CBF9CDD2093C2726DDFE913FAA9CE
Validity
Not Before: May 11 01:32:12 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a01319c-064e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:c2:f7:e2:a7:b3:c5:92:d8:26:6b:cc:70:
52:a2:22:d1:a0:72:35:54:d8:39:60:a5:e9:1c:96:
61:d2:36:1d:22:b0:4f:af:1e:bd:d6:96:33:78:56:
9a:f8:87:b0:22:e1:a3:e9:cc:1a:eb:06:c4:07:7f:
ee:0e:b7:e9:cb:03:da:d9:28:d7:d1:66:15:a7:05:
9a:c0:eb:28:c5:3c:20:a0:2f:f9:3c:2e:91:f4:6f:
71:28:85:c4:f6:32:d8:c1:2f:16:a0:07:fd:8f:35:
ce:66:6e:fb:57:6c:9a:1a:b2:c9:ae:ae:ba:b0:75:
58:9f:d1:5f:9c:a8:d1:90:ee:3a:21:3b:5c:cd:5b:
82:e9:a1:16:b6:21:e1:49:9d:2d:85:e5:7c:b5:f7:
48:96:17:34:68:23:60:4a:c4:b5:d9:1e:3f:f0:d1:
f0:7c:73:c9:20:4c:02:2b:ef:97:93:5b:f4:8e:4b:
19:9f:a3:32:18:ae:56:f9:5c:78:df:3a:4a:a3:f6:
d2:1a:8e:27:e3:2e:c3:8b:ac:5e:52:0b:80:a1:e3:
b3:89:83:d3:de:60:0c:61:7d:62:c0:de:61:20:ad:
ae:74:8b:d9:43:16:9e:19:7b:56:24:fa:37:a6:d1:
82:f6:a1:b9:5e:57:ec:18:67:77:bb:4d:3b:5e:cb:
a8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4E:54:D8:AF:E3:6B:A4:7B:05:C6:78:6F:B2:67:26:A1:2A:18:14
X509v3 Authority Key Identifier:
keyid:FC:7B:39:4F:8F:9C:BF:9C:DD:20:93:C2:72:6D:DF:E9:13:FA:A9:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Hs5T4-cv5zdIJPCcm3f6RP6qc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2A6D/7F8D63B40CCB11EDB3CD4768C4F9AE02/7B18C5B40CCE11ED97C94316C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.120.230.0/23
Signature Algorithm: sha256WithRSAEncryption
99:2c:f9:a7:46:d2:bc:f3:8f:13:d1:7e:45:b2:7f:bc:2c:94:
a0:a2:8c:39:96:5d:f4:f9:dc:5e:54:b9:95:24:e5:5a:e0:ee:
77:ea:1b:8d:bd:1e:4e:c9:b0:7d:57:8a:d2:db:9f:43:b6:98:
2a:71:72:2f:21:39:59:58:db:67:7a:35:9c:b3:9a:76:13:40:
c0:e3:c6:6d:9e:a0:dc:2d:08:da:47:ff:7c:b9:06:03:ff:c1:
a4:c3:43:d5:0f:bb:5a:ef:29:6a:19:ae:86:fa:df:47:88:31:
22:1a:fc:11:3a:37:1c:ef:d1:34:36:b8:9e:0a:86:64:77:a4:
78:a0:53:8d:a4:e2:18:fa:e8:e1:da:78:11:d8:d7:c7:50:23:
e8:6f:10:ec:aa:23:82:7a:0b:ee:35:e8:7e:24:54:4a:2b:a0:
0b:5b:2e:6f:cd:5f:ca:c3:a7:d9:40:4f:11:9f:c3:a6:f2:62:
39:98:8b:ff:7f:0b:17:2b:0c:b2:27:ff:2e:83:cc:38:24:87:
80:3b:73:ef:8c:e0:30:49:a4:be:4c:0a:86:fa:5f:b7:98:61:
b4:a6:cf:fb:ad:63:85:1a:dd:c8:a8:bf:06:0b:12:99:b1:f4:
7f:60:bc:53:04:4c:40:d0:e6:a4:1a:b1:cf:61:b3:0c:04:dd:
99:f0:8d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:58:26 2026 by rpki-client